Spam coming through

[Jimmy Hayes <jh...@verilet.com>]

Hi I just installed spamassassin and mimedefang on my redhat 9 box. I
think my email Is being scanned because I can see on my maillog and
/var/mail/user that It
Has lines saying x-xcanned by :mimedefang as you can see below. I don't
see the xscanned on the actual email is this correct? Also I sent test
spam email which the 
Actual output on the bottom files, but it goes through to my mailbox no
problem. Any ideas?
 
 
Thanks,
 
 
Tail Maillog:
 
Apr 20 07:31:45 gate sendmail[1698]: i3KEVjlr001698:
from=<jh...@verilet.com>, size=4022, class=0,
nrcpts=2,
msgid=<75...@exchange1.meddatahcs.com>,
proto=ESMTP, daem
on=MTA, relay=exchange1.meddatahcs.com [1.1.0.6]
Apr 20 07:31:45 gate mimedefang.pl[706]:
MDLOG,i3KEVjlr001698,mail_in,,,<jh...@verilet.com>,<jhayes
@sendmail.com>,SPAM!
Apr 20 07:31:45 gate mimedefang.pl[706]:
MDLOG,i3KEVjlr001698,mail_in,,,<jh...@verilet.com>,<root@s
endmail.com>,SPAM!
Apr 20 07:31:45 gate sendmail[1698]: i3KEVjlr001698: Milter add: header:
X-Scanned-By: MIMEDefang 2.
42
Apr 20 07:31:45 gate sendmail[1700]: i3KEVjlr001698:
to=<jh...@sendmail.com>, delay=00:00:00, xdela
y=00:00:00, mailer=local, pri=64237, dsn=2.0.0, stat=Sent
Apr 20 07:31:45 gate sendmail[1700]: i3KEVjlr001698:
to=jhayes@verilet.com, delay=00:00:00, xdelay=0
0:00:00, mailer=esmtp, pri=64237, relay=mail.verilet.com. [1.1.0.6],
dsn=2.0.0, stat=Sent ( <75EA21F
E420C864D895DE6E87383D6A157E821@exchange1.meddatahcs.com> Queued mail
for delivery)
 
 
 
/var/mail/user
 
>From jhayes@verilet.com  Tue Apr 20 07:31:45 2004
Return-Path: <jh...@verilet.com>
Received: from exchange1.meddatahcs.com (exchange1.meddatahcs.com
[1.1.0.6])
        by localhost.localdomain (8.12.11/8.12.11) with ESMTP id
i3KEVjlr001698;
        Tue, 20 Apr 2004 07:31:45 -0700
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----_=_NextPart_001_01C426E3.DE788012"
Subject: SPAM!
Date: Tue, 20 Apr 2004 07:29:20 -0700
Message-ID:
<75...@exchange1.meddatahcs.com>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: SPAM!
Thread-Index: AcQm495qsBE63pTNRy2a6Bk/bGusOA==
From: "Jimmy Hayes" <jh...@verilet.com>
To: <jh...@sendmail.com>
Cc: <ro...@sendmail.com>
X-Scanned-By: MIMEDefang 2.42
 
Jimmy Hayes 


 

Re: Spam coming through

[Martin McWhorter <m_...@prairiegroup.com>]

Jimmy Hayes wrote:

> Hi I just installed spamassassin and mimedefang on my redhat 9 box. I 
> think my email Is being scanned because I can see on my maillog and 
> /var/mail/user that It
>
> Has lines saying x-xcanned by :mimedefang as you can see below. I 
> don’t see the xscanned on the actual email is this correct? Also I 
> sent test spam email which the
>
> Actual output on the bottom files, but it goes through to my mailbox 
> no problem. Any ideas?
>
>
Jimmy,

You want to make sure that you have spamassassin and mimedefang (you 
don't need mimedefang to run spamassassin) set up correctly to mark 
incoming spam as spam. Then you have a couple options. You can have your 
email client search for that mark (X-Spam-Flag: YES, X-Spam-Status: Yes) 
and move those messages to a spam folder.

The option that I use is to run spamassassin with the sendmail milter 
(not mimedefang) and have the milter redirect all spam to a spam trap 
account, spam@mydomain.com.